$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft File: 9FYY6ic_QLS8aF4piH4gUIPEkKY.mft (raw, json) Hash identifier: P+aDsVfH/eZ5hfcpRRtgWtpmsWgP+l3GTpXVn8rYIdI= Subject key identifier: D4:FF:4F:96:97:D5:20:69:AF:BC:E4:F8:6E:43:F8:D5:A2:9B:A9:EE Authority key identifier: F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 Certificate issuer: /CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft Manifest number: 0121 Signing time: Sat 23 Nov 2024 02:56:27 +0000 Manifest this update: Sat 23 Nov 2024 02:56:27 +0000 Manifest next update: Sat 30 Nov 2024 02:56:27 +0000 Files and hashes: 1: 9FYY6ic_QLS8aF4piH4gUIPEkKY.crl (hash: eWHK2lg15X4d+WUu2Ian6SulucC3kP106BT6Q06TiFM=) 2: 9BBCC1F60D2411EEA8431074C4F9AE02.roa (hash: ed+DKZIJR1YbPJAhfNED0AymtEOfO9waIhPjdUrWQck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3E37/serialNumber=F45618EA273F40B4BC685E29887E205083C490A6 Validity Not Before: Nov 23 02:56:27 2024 GMT Not After : Nov 30 02:56:27 2024 GMT Subject: CN=6741445b-3a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:d7:f6:11:41:42:82:dd:19:7d:a6:05:5e: a1:15:1d:db:65:6e:b6:ae:23:48:ef:1c:0a:13:1a: 88:6c:64:5e:18:ac:d4:65:21:37:92:ed:af:42:a9: c0:ae:0c:d6:ab:75:49:c4:a7:81:40:ce:eb:29:2d: c4:8a:11:ff:d2:08:c9:ac:a6:b9:1f:43:39:53:2b: 91:68:32:8e:b7:34:30:f3:d0:30:14:ba:bd:d4:3e: 0d:93:d4:73:41:d2:5e:bb:88:3f:15:93:57:63:f4: 12:16:24:f6:43:6f:82:d2:cb:41:3d:99:06:e0:30: dc:b9:3a:0b:1d:f1:e2:96:ea:a3:24:d5:86:ea:26: 08:7b:41:2b:b8:a6:22:72:dc:71:20:bc:e1:27:cb: 83:8f:55:95:3a:b7:e6:5b:88:91:45:e0:de:8d:ba: 42:60:64:59:25:ea:d4:8c:e9:b4:e8:04:8a:1b:2e: 5e:c5:23:0f:08:8e:f8:1d:e9:84:3f:2c:d5:40:5d: 8f:2a:9a:67:60:f9:84:31:a9:57:86:50:2e:95:ec: c5:43:c1:b4:8e:46:25:ae:3c:c8:61:df:00:75:59: 44:63:53:c4:fb:81:c2:5e:42:0f:06:80:09:dd:a6: ae:8a:d5:da:fa:98:d2:33:6d:9c:97:20:75:7a:b2: e1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FF:4F:96:97:D5:20:69:AF:BC:E4:F8:6E:43:F8:D5:A2:9B:A9:EE X509v3 Authority Key Identifier: keyid:F4:56:18:EA:27:3F:40:B4:BC:68:5E:29:88:7E:20:50:83:C4:90:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FYY6ic_QLS8aF4piH4gUIPEkKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3E37/B44553D8F09F11ED9B4A0734C4F9AE02/9FYY6ic_QLS8aF4piH4gUIPEkKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:66:12:ac:bc:8f:4c:2d:bc:12:91:80:9d:63:e8:7b:72:71: cd:6f:41:74:bf:24:5b:ac:ec:39:35:86:04:80:2d:73:92:74: 3b:2f:8b:e8:fa:a2:dd:47:77:8e:f6:4b:af:71:d3:d0:74:83: e0:cd:24:51:9f:e0:62:b7:9e:28:fc:5f:52:ca:37:af:ba:b2: 2e:78:a8:5f:ae:70:9f:d1:f7:fb:58:6c:be:af:3d:ff:79:a9: ce:95:00:f3:2c:97:57:f2:1e:39:06:c9:37:d5:89:fd:fe:39: 3a:d8:19:c2:1a:74:e1:08:6a:5a:94:1c:1e:1c:43:99:c6:6e: 52:a7:97:52:13:63:09:f5:81:fe:03:90:90:bb:03:e6:23:16: c2:e5:1f:4a:db:c9:2b:67:24:4a:19:61:78:9d:0e:fe:36:3d: e6:7f:fd:15:b5:c5:23:6b:b8:eb:56:09:37:2b:16:6e:54:bd: c4:c0:3d:e3:8b:05:c2:10:75:43:15:56:5f:e1:f1:eb:8b:3d: 32:86:07:2b:82:5f:12:35:3b:7e:3b:af:38:8a:35:a1:f8:85: c6:4d:49:51:2a:74:e7:40:b3:04:bd:fe:bf:4f:8f:68:b6:c5: 14:c4:ba:a2:85:4f:bb:e0:cb:6f:8b:05:cc:12:2b:f5:19:b3: 9a:3a:85:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFMzcxMTAvBgNVBAUTKEY0NTYxOEVBMjczRjQwQjRCQzY4NUUyOTg4N0UyMDUw ODNDNDkwQTYwHhcNMjQxMTIzMDI1NjI3WhcNMjQxMTMwMDI1NjI3WjAYMRYwFAYD VQQDEw02NzQxNDQ1Yi0zYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPbX9hFBQoLdGX2mBV6hFR3bZW62riNI7xwKExqIbGReGKzUZSE3ku2vQqnA rgzWq3VJxKeBQM7rKS3EihH/0gjJrKa5H0M5UyuRaDKOtzQw89AwFLq91D4Nk9Rz QdJeu4g/FZNXY/QSFiT2Q2+C0stBPZkG4DDcuToLHfHiluqjJNWG6iYIe0EruKYi ctxxILzhJ8uDj1WVOrfmW4iRReDejbpCYGRZJerUjOm06ASKGy5exSMPCI74HemE PyzVQF2PKppnYPmEMalXhlAulezFQ8G0jkYlrjzIYd8AdVlEY1PE+4HCXkIPBoAJ 3aauitXa+pjSM22clyB1erLhCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNT/T5aX 1SBpr7zk+G5D+NWim6nuMB8GA1UdIwQYMBaAFPRWGOonP0C0vGheKYh+IFCDxJCm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0UzNy9CNDQ1NTNEOEYw OUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FMUzhhRjRwaUg0Z1VJUEVr S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGWVk2aWNfUUxTOGFGNHBpSDRnVUlQRWtLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0UzNy9CNDQ1NTNEOEYwOUYxMUVEOUI0QTA3MzRDNEY5QUUwMi85RllZNmljX1FM UzhhRjRwaUg0Z1VJUEVrS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPZhKsvI9MLbwSkYCdY+h7cnHNb0F0vyRbrOw5NYYEgC1zknQ7L4vo +qLdR3eO9kuvcdPQdIPgzSRRn+Bit54o/F9SyjevurIueKhfrnCf0ff7WGy+rz3/ eanOlQDzLJdX8h45Bsk31Yn9/jk62BnCGnThCGpalBweHEOZxm5Sp5dSE2MJ9YH+ A5CQuwPmIxbC5R9K28krZyRKGWF4nQ7+Nj3mf/0VtcUja7jrVgk3KxZuVL3EwD3j iwXCEHVDFVZf4fHriz0yhgcrgl8SNTt+O684ijWh+IXGTUlRKnTnQLMEvf6/T49o tsUUxLqihU+74MtviwXMEiv1GbOaOoVs -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:50 2024 by rpki-client on console-ams.rpki-client.org